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^^y^ fvm^ «r*)* LTHulSil«:S:icff jfJO LiffimT^- ^ 
- iJ^ $r L TSjgS $ tL/c ii« 7^ ^ joi >T . 

m?d.'^mm }kxf^mm > e ^ - ^ p^n - ^ 

i^htitz. w--mmmmx^ii\.x9ji^^^i^M^m=i 

=^ > e ^ — A* cT^iifET"— 4^ (^7=" ^ /u*^ ^ ^ e> 
^y±->^y^i^=^:^ht:m^m\^. ^ii*riS«<fii=' VtT 

SfgiRi] =1 V fc- ^ - {PS =1 V fc' zi. - iC:^ it 5 

fSM 3 V - ra t:i*5 tt ^) i^lSiffl = V t" ^ - ^ CD^SE 

iSfsffl xi^mm 3 > fc' - ^ - 1> 31 

[0001] 

mLxm^%m^noim^m:fjmzm*)^ mz^ ^> so 



^ 5 V ^ Jloc ^ i;^ 31 V h fell V- X V" ^•C<o*9^|g|iE 
»3i ^IiHA[L;@^?l: ic ngi- ^ tj (7) T' ^ S o 

[0 0 0 21 

izio^^mf^ ^^mm i^ixm^ti^ it ^ 

oT-btSiUffJtxyi^^ib^J^JcLTtT'v^^/V'^^S i g (K 

s. x) irmit-r^o sft#ti. mm^<o{^mm (mtn 

i g (Ks. x) "Ve r (K 

p, Sig(Ks. x))=x" ^^^liEi-Sw>i::J:o 

[000 31 f^J^J\^'^^(D^^^mt. I^^lwliy 
]tx/il-e>(?)^e^^/WW*S i g (Ks. x) <7)^j7Jcfi^ 

jc, ±iiiifi^!)Tiiiffi(li j;c x tljpt LT a 0 0 - 1 6 0 5/ 

hSj^. m7L\i\ 2 8 tr^y htO®^S(D^ y^-iy^y( 

^:/aiXMvl (x) ^^/7!ci-^^S^V^9 = 

[0 0 0 41 :L(Om^s mm%\'t. ^l^iDX^ot^/^y-^ 
— i^^^-^oL:^ hM(x)iw^57^>^^/^*^S i g 
(Ks, M (x) ) «r.h£S5gtlKs^ffiV>T*^U 

y^hM (x) 4r±J5KLr "Ve r (Kp, S i g (K 

s. M (x) ) ) =M (x) " ^i^M-^^o -r^J:f:>h'^ 

ft#*^> min^<D{i^mmKp^m\^^x±^7'iy^/i^m^ 

S i g (K s, M (x) ) fi h^ yt—i^^^Z^=:^:^ h 
(Ks. M (x) ) ^'^^p-frTiSP.fLTt/::iim^x7!>^ 
;^ yir-v^y-Y v^ai;^ hM (x) ^Itgti-^ r ^ j;iJ:o 

h^tnm (tomiiE) sn. *^iifg:t<?5^^i* (v^ 

[0 0 0 51 ±jfLfcJ:9t^. 'Sim^tjmiE^<Dy'i^^ 

UTS«#<Oi>Bgii«rffiffl-r5CfcJz/£oTV^5 (IT 
U — X. 509 (I ntemat ion Te lecommun icat ion 



(3) 
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Union Xv-y-Xtti^5 O 9) ) , -A". 3Sit#l±. 
[0 0 0 61 

(1) T^^i^^^J^/uS^cD^oiET'ffiffi-t-^^MatOjlffl. » 
3®i^fci6{CI TU-X. 5 0 9^-e^^LTl^-5^M« 

[0 0 0 7] (2) y'iy^^i^m^^i^my^fL-^ma)^ 

M7-^ b^^^ 5/i:^:d5i9A-r^^cOl!gS,^C;&? 
[0 0 0 8] (3) 31— htSSS*>:^-ri.iw^t^ 

[0 0 0 91 (4) v^i?^/i-S^S:fi£^Lytffl^g.|E«: 

(o 0 1 ol ±IE?S3fe&»T(7)fl^li^^)K?Bi- 
[0 0 1 11 



ant(pi] =1 t« ^ ^ ^ CO ^S^MSr ffl t ant fill :3 > f ^ 

^ U 7=^ ^ /I'-S^ ^ff/:i t::i!fe^ L T ±rdi£<t{fl'J = 

-^t LT J- 3SS«1»J 3 v t-^ - ^ iciHt C (Dim 
40,3 =3 > fc-^ - ^5? t> ^ (^^BBigi $r g {t T±SiSm«J 3 
V e ^ - ^ ^ OS<t {R!J =3 > t- - ^ I - ^3 1 1 5 ±15^IiE 

^ - it 5 imUM = V ^ - ^ (OSglE^tf 9 z 

[0012] <ffijS 2 > 1 {ctdfto^gsEMSSrax 

[00131 mf& 3 > it*3s 1 {ztdn(r>mm^m:^m 

^ - V h IS Si :^ 7=- ^ fli i- S =J f * — T' *> 
[00141 <liij3£4> 2:>nt3iz^Mi(r>m 

[0 0 15] 



(4) 
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h[7— ^ 4 0 o:cj;or. ^i^m^^^^'^—'^ 3 0 o t 

[0 0 161 .tmtJ&m.^m^>\::'^ — ^ 1 O 0{i. ^- 

i^— y<-/a^7A 110, ^—f^^m^f—^^—^ 1 

hM^,&i5 112. T'i^^^i-m^mi^mM i io 

X 1 2 Oli^—- tF (^ffi{KJ=i>t'^ — 2 0 0) <D 

^y<':fuir^M.i 1 ocoW31TJwfcor^— ifco-T'i^a^ 

\ 3 0li^.aEAQ.^i = >'t'3.-^ 1 0 Olc:^\,^X'ri^ 

y<:/0:/^Jxl 1 0(Dm^m^^^-r^iy(OX'^^. 

[0 0 17] miBm^>^'^ — ^ 2 0 Oil, ryj^— 20 

3 i/^ A 2 1 0 :aU^Si'*iil^^]SJ 2 2 0 

r/^5o wZ-c. r:/!^ >3 >'^n:/^A2 1 0 
i^*^jiicMii^2 1 3m^h^£^muMin^mn2 i i 

2 0 OcOv^v^^yuS^^^^-r-S^I-^gm-t-^itf^ffllJ^ 
^-t-^x — <$7 2 0 0C0*k?>ai^^lfSli-6t>cOT'^^. 
[0 0 18] SfItt«J^>l:"^ — 3 0 Oil, TtT^y 

>^^^vJ^3 1 oau^r^y -^r— v-g ^<:7' 

o^Vix^P^HiS 2 0 '>{i;tr/^5= rrr%T:/!;>>- 20 
— ^'T'd ^^A3 1 oil. v?y>r v^ai:^ h 

i^^g|53 1 2Xt/T'v?i$^/V?«^iE5!!:Sg53 1 3#;i»^ 

i- S IS ( C ^ ^ tt 5 T ^ 6 . 

[00191 <A»W 1 oftm lu&^^m 1 CO 

$ti{t:noi>Ti5j.M;^i-5c iii2{i, zmm^i^\f=^-^ 2 

0 0(^ii5it5T:/y'^-v^3>':7^ai/^A2 i 0O®i<1h 

^-->3 ^^^^2 1 0(1. ^-riiftjt(o*(* 40 

fi#tS^^f^^i--5 (x5^.;/:rs2i) , J^T. iifl'-ic 
[0 0 2 0] ryy >H>:/Di/^ix2 i o 

(1. pi :yir— v^y^ v^^ :^ hia^®2 1 2 LTifi 

2) . t*v^T. ?fcf'^^^^SSiS2 2 or'«MLrv^5i^{t 
^=i:^fc-^-^ 2 0 ooSJgjiiSLt^T'i^^yi-^^^/S^ 

-f-^iT'v^^/uS^irt^-rs (;^7"s/:/s 2 3) . ^(r> so 



^^WM.^M^^y'd^ — ^ \ 00 (TT/y 
~/<>^ci^^i^l 10) (ri^tHtb (X7"-/>^S2 4) . 

^{•^ffjz^v-f^-^ 2 o 0izi5tt5iM«:t3lim#)ilft^*l- 
[00 2 1 ] EI 3 ic±tdr ^ y ^—^^ 3 /<:/o 

^i=.l 1 OlwiSil^tL^X — ^ (Il^tx-^) C0:7:^- — 

tf„ ^^>t*^»J:^lc. ii<I:5tili§fi#t«tftA^D^S:«# 
tO> yir— ✓^>r i^^;^ h<7)v^i^^/u5ife (7« ^y-t— >^ 

\%^-^i>-m%^k\^^. mm\x\%^ ii^ft^tsi^Aii 

i3l«ffi!|3>f^-^2 0 0. S«*«^B*lS«fflI='> 
fc"^ — 3 0 0 it/^^. 

[0 0 2 2] El 4(1. fgiriTi^ta^^^-fcr — 1 0 OtC:Jo 
Vi^T^^) y—' ^3 V-y— /<:/a^7i^ 1 1 0(Dij!jf^fr 

U '>3 ^^i^— A 1 1 0 (WMM^^^:y\f 
zr-^lOO) (1. mTi5|m{pjj32:/t'ix-:$^2 0 07i>^ 

3#1«) ^Sffii-^ (:^T- y>^'S4 1) . 
[0 0 2 3] T:/!J'5r— v-s^i^— /<>^Di/^A 

1 1 Oil. 7^v?^/uW*^IiEAQ:^gBl I 3i::J:oT53l^t 
^M=I:xfc"^-l$/ 2 0 0(D-rv^^/^^^^75^tliE^fT9 (:^^ 
7'-;/:7's 4 2) . rco^v^^yul^^coil^giEH. T^v^^/V 
^^mmM% \ 1 3(^J:oX. ^T^7)T-)li-C^7 9. 

Ty^y >3 ^<>^n^7Al 1 Ofl. ^ 

-if^^^7^-^-<-;^ 1 2 ods^^^nrv^^i^mm'] 

2 0 0 tOii^r^gt^lSi?1 LT. 31^ 

m(Bfj=f>'fc'^'~^ 2 0 0(0-7^ v^^yl-Sifeji^ib^ yfe— :^ 

hiaiian 1 2{Cj:oT. r:/y >5r— v-a >-7^i^^7i=s 

2 1 0;i^^5COiiDm>cc7)y iv-fe— v^i/^ v?^^ h^frfclc 

^i^^e^ — ^ 2 0 0 {^31.^— 

[0 0 2 4] xv>^5?/^?*0^tiE^. Ty^y^-i^s^- 
4j._,<-7'i:i^^j^ 1 1 Oil. T^'i^^/USigvfe^MSlWl 

1 4^^ei(iL. %^immmM \ 3 o-c«^-t-«)S:/D^^ 

4 3) , TTT'y ^— i^s y<:?'a^5Al 

1 0(1. ^Ll^^mt'X}l•:^y'y'fA 3 T'Sffcl::^^ Ly^-r 

-^SOOlzmm-r^ (;^7^'y^S4 4) . 

(1. JiiS3afS:icSr#fiii-<5w^{i<toT^<5#So 



[0 0 2 51 msisi, ^mm^^^^=L—^ 3 o oizisn 

hr-^S. ;i-f> §^eii]=i>^t'^-^ 3 0 0± 
cor:ry >!r— >-3 >:/a^^j^3 1 Oil, mMt^M=^> 

t'^ — :yiOO (T:/y *>3>'1^— 1 
10) ^O^^bcoiiftiSc^^^/^T^v^^/i'lr^ (T^V^- 

1) . 

[0 0 2 6] ifcic, rz^i) ^—>3>^^y^J^3 1 0 
SStiF.ftL|l3ve'^-^ 1 0 OTi^ibcogr^^T^i^^/u 

S«<OMiiE^^f^ (:?^7^-;/:/S 5 2) , rO^i^^/US 

3 1 oil. r:/!J^-v^3>-i?— ^<'7'Di/vA>i>^M» 

1 1 0;6^^O7^v' :$^.'i-S^^^ib>< — v^^:^ h 
2lcJ:oT, r>^ii ^—v-a ^i^— /<:/Di/^^ 1 i o 

{M=3:/e'3.— 2 0 ot^h^i§m='>i^=^—'^ 3 o o-- 

[0 0 2 7] (MmU (D^M:) 

mmmx^^Lvxmi^-t^mmmm='i^}::'=^-^ i o o 
t/^miEm=i>^'^—^ 2 0 oco>>iMia^i^^'r^<7)T*, 
illftfliijzivif^-.^ 2 0 0(^^>5^ii<;)jlffl®T% lett-c 

[0 0 2 8] (2) ^iP^Jl^m^^^m\.1tZ.:§ 

=3 >- 1'^ - ^ Sf^iiinnRij =3 :^ t" ^ - (Tx^mm^K T'-r 

— ^ 1 0 0:65^— if (ijm{ffl=2>fix — ^ 2 0 0) (7):i^ 
^li^^i:*!)T«3l-rSC0T% §:mfflSl=^-tf^-;5r 3 0 
0;65aJt<tiaiJ=' ve^->5^ 2 0 0 (D^f^iS^fi^ tCA^i* 

^ — 2 0 0, 3 0 0r^l-^P/i^-CCO^>y h 

[0 0 2 9] {^mn 2 (7)tll/:x> HI 6 il. >*C^P^|C J: 5 

2 4 0, 3 4 0 3 0(7>:3>^b:-^ — ^ 10 0, 
20 0, 3 00:6^ :3 >' t'ji — 2 0 0 ^ = 

1 O 0 tll^-y — 4 0 OdJloT. =3>'t'zr — ^ 
1 0 0 ir^JV-fc:'^ — 3 0 0 ^li^y hl7 — 4 0 1 
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O, 2 0 0, ^^^fzx — ^ 3 0 OlC^fz^>oT:^>«fer^ 
y 'Vh Vi/p 5 0 0;&5S)ij<^i-^v^:^'rA<7):^ 

^«^€:-T<LTV^5o i^T. 3o(0=2>'f zr — ^5? 1 0 
0. 2 00. 3 00^, *:*»W2;ci3it^«'^<7)^l^ 
1 0 07tc5=»>t:*^"-^^l§iiE*QrS|:=i:/t^rL 

— ^J', 2 0 0/^:^=1 >t'^ — ^^aHf(PJ=i>'f^ — i5^, 
3 0 0?:c5S<31]UJ=i>fc'' ^ — 

[0 0 3 01 ±fd^S5jmsi=3>f rr — ^ 1 0 ori, 

13 mmmmx'mtL\^xwiw^^\y<r>x\ iM^itL^mmm 

— i^^^i^zc:K V^ir^i^^^ V 1 4 1 ^.Tj^f i> ^ J\^m^ 
y^Zf'Jjc. ^h\42t. mUy<^ -fi^^^J^ h 1 4 0 

(n^mm^'^m-f^^m^mmmnx sot. mTv^i^^'r 

JU\^<D^X(Dy^':fi>:iL^ h tF) (D{d:mm:^>M:m^ 

Z(n^zf :^;:^^ h^J^mmy'-^-<-:^ i 6 ott, m 
By^-Cy'^yxy:^^^ h I 4 0(7)W5MTJ^^oT^-ih'cD 

[0 0 3 1 1 i^iS^aiJ^Vt:^^-:^' 2 0 Ofi. ±IE^M^tOr 

ix5 0 0T*il]i^$^t5^^v^^^ hA2 3 0, 

iy^^ v^zcx h;d-:/v^^iJ^ h 2 3 iRXJ^'fiy^/i^m^^ 

•^iy:^ ^ V23 2t. h A 2 3 0 <nW&m^ 

'^Wt^W^^^'^n^l 2 0 <h^{i;t^ = 

[0 0 3 2] ^mm^y^'c=:L-^ 3 0 oii. ±rd5>tt>50: 

^«it 3 4 0 <7:){t!l. ±|E5>»T>^y>r--i^3>>^n^^ 
J=.5 0 0-Cl!)f1^$tl^^^-:^:t^ hB3 3 0. yir— 

30 i^^$^-r v^:^>^ f 3 3 li^r^v^v^^/u^^^ 

yv^^i7 h3 3 2 i!, ^lE-'N-f >^;^y>^ii::^^ h^raii3 
5 0 i:^ffi;t<5„ 

[0 0 3 3] f^^. UtWM^<^ -fir^^y^ ^ V \ A 
0 , :^^-J^^ ^ h A 2 3 0 ^Xy^-t^-y^ ^ h B 3 3 O 

ir-v^y-fv^^;;^ l>5f:/v^:ii^ h 1 4 1 . 2 3 1. 3 3 

■r>^^y^^^:^:/v>^:J^ h 1 4 2. 2 3 2, 3 3 2 

[0 0 3 4] {^v^m 2 <r>m^m tfCiZ^ ±Mf^^m 2 

0 0!c*ittS2j-:/v?ai^^ HA 2 3 oa)i!if^4r^i-37n — 

2 3 011. :^Ti®mj:c<:o:$:fr^fmL. ^ixlwif^«6*i6 
f>nytff^^T'3*«<Ki='>t^^- 1^^2 0 0 
A2 3 0) t^fg, S:m{Pi]=>t'^-^ 3 0 0 

h B 3 3 0) «i^ft^{^;&P*f S (X7^:y7'S 7 1 ) o 

50 t V ^ •? J, 



(6) 
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[0 0 3 51 SfclC. -^-^iPsL^ hA2 3 Oil. :^ y^— 

i^zc 7^ h ^ 2 3 1 C0> .yir — v^y-r 

h^riirgU (>^7^5/:/S 7 2) . m^X^ 

l^:^^f{5 2 2 Or-ff^LTV^^^^-^v^oi^ hA2 3 0 
^giiii^O^T^v^^/l-W^r^^^v^^iJ^ h 2 3 2<30S^^^jc^ 

7=^i^^/uS-*SrdfeJ*i-S (:X7^5/>r's 7 3) = -Sr^^^. 

2 3 0</)iim5:3i^{t-T-W^^«^Ti-5. iiBfST^'-^CT)^';^ 

Mi. mmm^^:t'/i>^^ hA2 3 0. 

hB3 soizfji^bzt^m^^xmstmmx 

[0 0 3 61 [18 11. EgrjEMS=i Vtfrr— 1 0 OlCio 

i^^^iJ' h 1 4 0(i, ^-fiS^M^Vtf^-^ 2 0 0 
:/v^ij^^ hA2 3 0) :6>^(Oii{I3:^:^-:^v^:J^^ hA2 20 

3 O cot' V? /VS« *"'J^f:>i^:r * S iifST^-- ^ 
^ (^7^-;/7'S 8 1 ) c 

[0 0 3 71 l^?.!iE>'<-r r^'T'v^^ ^ h 1 4 0 Ji, 

^i-y'i^nL ^ V<kWimrf—^^—7. 1 6 0 icSli^$i^TV^ 

5^>^i^:«il5^ hA2 3 OCO^BHIi^fiEiTJLT. 5f>^i>ai 
^ h A2 3 tV^^-h^t:^:^ y ir — v^y-< v^^ X 

^ h 1 4 1 cO> :y-!r— v^^^v^^;^ y y K^f£ 

^jvf^ — ^ 2 0 0 ci^^— 

[0 0 3 8] T^v^^^U^^fD^liE^. 
oi^ h 1 4 Ofl. xv?i5^/WSi&:^:/v^ai^ h 1 4 2 

^^Si/S^ y:x k;ij:«9. m^m'sm^\ 3 or-^si-t-^ « 

(;^7^s/:/s 8 3) o -eos. ^iiE/<-r ^^^^^v^^^' h 
1 4 0(1. ±mmm:ztmfz\z^i&i.fzv't>^ji^m^^ 

^io-^Xfj:^miEy^-^%::i-yi^:^^ hB 3 3 0\:imm 



i-S (;^7^5/:/s 8 4) 



mw.-t^ ^ (1 i or ^ «9 5. 

[0 0 3 9] 111911. SftW^ve^ — 3 0 0{lio(t 
^^t-y^i^az^ hB 3 3 0(7>«b^^4:^i-y'D— h-C 

^i*. S^M^Vf ^-^5^3 0 0±eD:;r>^i^ic^ so 



h B 3 3 Oil. igHiEisnrS^:^^^ — ^ 10 0 (SgaE^'^-f 

fir-f^^z^^ h 1 4 0) t-^(D\ii^^hmtLf^y'V>^ )V 
l-4'i am^'^'i':/:^^^^:^^ h 1 4 otwJ:^xv?i$^/i-W 

9 1 ) „ 

[0040] ^{C. :?h::^v^z«i ^ h B 3 3 O Jl. SSgiE^^ 
= >fc:'^-^ 1 0 0;5>fecoSrfc<cxv^^^/i-5i&0^tSE^ 
ff5 (;'^7^!y:/s 9 2> . ^iT^T^-^^^yw^^co^llEd. 

Ji^T^^mir^T^o iDi^fl. hB 3 3 Oil. 

mu,^<4^^^^^z^^ Y<kmm3 so^s/nL-c. igiE 

^<-< v^^TT/S^aiiJ' h 1 4 0i757^C^^/VS*;&^e>y ^xir— 
^ V:^':/'y3z^ K 3 3 1 ty-fe— v?i5^>r v^^x h^gfe 

^J^rr^cb. ^:/>^^i5^ hA2 3 0;6^e»^:^i^:j^i^ h 
B 3 3 0-^6oaSi;iEjffi{fiiiSr^**-Ti-5. 
[004 1] <ft»ffy2(Da«> 

(1) »»i3:S->;^7^A{C:feW>Tt. '^^&M(O^0\Z, 

'5»|jE«L3l='>fzx-^ 1 0 0i?aifl«l=^i^t'^-i5'2 
0 0(7)4^S§^$r«=Ji^5C0T'. miEm=^^^^'^-^ 2 0 

[0 0 4 2] (2) ti^^. ^m^m^m>i^:^7'J^X(r> 

n o ir-f^yz^L ^ h A 2 3 0 . v^ai ^ h B 3 3 0 €r<i 
:tfciS«{W='>fzL-^2 0 0, Sftffll^^Vt-^-^3 
0 0fffl<7)i§:SEAiL^='>tV — ^ 1 O 0;5i^-if (alftffil] 
=J>t''^-:5^ 2 0 0) <;5^r^^^r^<hi6T^iii-^i75 
T. Srn^U^ Vf^ — ^ 3 0 Oitiai^I{ii=»>^f ^ — ^ 2 
OOi^^^i^^ii^fSI^SrfCA^+^aKSt^ld^^ll. *5/h[7 

^ 1#(Cig§mffi'J='>'t:'^-i5' 2 0 0, 
3 0 or«1(ri^fcorc7);t-y VV-^ Vy-? ^ y^^WP 

[0 0 4 3] <ai*W3C»«dc> laioii. :^^mizx 

Ift2 5 0, 3 6 0, 6 1 0. 6 1 1. 6 1 2, 6 1 3^ 

3l^-r'5^^<75=^>t:'^ — 2 0 0, 3 0 0. 6 0 0, 
6 0 1, 6 0 2. 6 0 3St;«3i— v/^:^ htaHWffilWIl 7 
0Srl^iS"r5='>'t"^-i5' 1 0 0:6?. ^-yh!7-i5^4 0 
0, 4 0 1, 4 0 2, 4 0 3lZXoXBm^tlit=i^—i> 
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>\i'zL — ^ 1 0 0, 2 0 0. 3 0 0^. :$::Sr^0^J3{C^o 

n^^^(Dmm\:imrs^. i o o/j^^^^vt-^-^'^ig. 

giEiJiS=i>tr3.-^, 2 0 0/^5=^:^^^— ^^iSfS^RS 
[0 0 4 4] ±fd^3iEilO:M=i rr-^ 1 0 0Ji*-pg 

(i. / 0^>^ h^iL^as 17 1. T^i^^/uW 

^:^iEM^gC 17 2, T^v^^/uS^fe^fefijt^^ai 17 3. io 
:^-i^^>h{L):mmf -9^-^-1 7 4, S?SM»5M^ 

1 7 5&t5^ -yt-v^lEit^^l 7 6a:^^T/^5o ± 

[0 0 4 5] i|^fs{RlJ=r>^t'rL-^ 2 O Oil. ±12^— 
^> h^a;iiSRjfcfe2 5 0(75fi!l, v^oL^- fA 2 6 OSr(i 
^r-C, 31— v^zc> h A 2 6 0*1, s'-t — i;^^ 
^ hM^.aS2 6 1 , T'v^^'/l-S^^figiJlMSB 2 6 

2jtt/s?SM«aiaj2 6 s^m^xti:^. m^m's^m^ 

2 6 311, ^-i^^V hA2 6 0<Z)8<*li4rS^^i-5 1 

[0 0 4 6] ^m{R!]='>'fc'^-"3' 3 0 Oil, ±ie^ — v> 30 
^>h^^l«ift3 6 OtOftb, :3i-v^:^> hB 3 7 0 €ri« 
rrr-, ix^->^a::xhB 3 7 0(1, ^ y-^r-i^y 
^iy^:^ h^mt^S 7 1, T't^^5^/U-?^ltmE^Mffl5 3 7 
2^tJ^:3i-ix:xi> Masi«M<iiMM3 7 3^ii;tT/^ 

[0 0 4 7] g]?I^>;^-7^-i^i^^— v^-^- h*l, 31— i^s: 

Wji" 5 fl^:^ ^ t> ol^ili^.^ - V h Xill oiO =2 > f 

> hl&mmm l 7 0l::Pp^l>a^t:>-ti:;^ -yir- v^^^f^-f^ 

hai@^«l 7 0(^:J^X h L. Sftf^J^-v^^V 
hfl, :i^-v?:ii>'hteii«»l 7 0{zm\^^^ioit/ 

ffa^*D»9. •?:^^^^t^r ^;45T'*5 J:9l^^jr$n-Cv> 50 



^« gI?j^v';^7'ACD3i— i;?^!^^ K A 2 6 0&I/:3^ — i^oi 

>hB 3 7 0ii, ±i$Ly^J:9i^^it^T^oTt.^Ii 

±id.<DXotitmmMmxmf^micfj:^tix\^'^^h(Dt 

[0 0 4 8] (^i^m 3 (7)i!|f^> ifelw, ±3^ 3 (D 

mm^^i^^xmm^^o ikii 

2 0 Otc^dlt-S^— hA2 6 0<O»if1^S:^i-7n 
A2 6 0il, ^-fMftjtcO:^(*:^<mL, ^ixJc^i^i^ 
hA2 6 0) tSI8. ^mfHfl^^Vt:'^-!^' 3 0 0 (^-v^ 

h B 3 7 0) ttt«4rWJ0i-^ (>^X!y:;^s 1 1 

[0 0 4 9] ^^C:, ':^:n>KA2 6 oil, ^ ^/ir — 
-v^y-fi^^::^ h^^fifeL (>^^-y >^S 112), 

mw;m^m^2 6 3x^mi.x\^^^:^-i>:j^:y hA 

2 6 0iO^i^.^^^t/7=^v;f^^yl.?^^&m^Si5 2 6 2^^ 

^^^fSL-r^ {7.^yfS 113). ^<r>'^. ±fe5ifS 

=i>h:'^ — ^ 1 0 0±(7):n— :/:n>' htSaWfifeW 1 7 OIC 
aiftL C^-r^y^S 114), ^— v?:«iVhA2 6 0 05 

II, i£m#«^;&^^— :^^>^hA2 6 0, Sfi#ffi#^' 
^— i^rt^^hB 3 7 (^\z.fSi^zh^W^*^x^^hWMrQ 

[0 0 5 0] [11 2(1, aESE^^grivtr^ — loot:: 

iStt^ni-i^a::/ hte^«til 7 0^7)»J^^^:a^i-:7cI- 
S!«t* 17 0(1, ^-riiim{u=^>t'zr-<$^ 2 0 o±cd:ii 

— v^:n> hA2 6 0 (b <7)ilft:S: i: ^— v^ic > h A 2 6 
{:^=r y'fS l 2 l ) „ 

[00 5 1] in-v?^:x hS^mwi 1 7 oil, > 
iz-fe-v^^^v^o.;^ h^^^i 7 1 my^^^y^jvm^^ 
m.^m% \ 7 2(C<toT3i-i;?:ii>' hA2 6 OOt^v^^ 
fV^d(,(r>m^^Vsb (Xx-/ysi2 2), wCDv^v^^ 

>Ymmm \ 7011, rn-v?^^-h^B§ii7^-iS'-<- 

7 4twa^$*xTl^^»^— v^3i>'hA2 6 004^^58 
li^^HJL-C, hA2 6 OcT^T'v^i^^/l-?*;^^ 

6^ ^^ir-v^y-Y v^znx h^fi^^m-r. iJ:(c, ^^/ir- 

i^^-re^oi;^ hiiiaiaii 7 1 i^ior, ±52iifS:3:op« 
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UfcH^{w-?-(7)3L— h A 2 6 0 1^:21 ^ — ^il^-^ 

[0 0 5 2] -T^C^^/l-W^fDl^IiE^, :3i-v^^>Kaii 
^^Sl 7 0 it. T^i^^JU^^^^^mU^ 7 3^mW} 

till 7 0(7)SJ^^i^^fJijl^LT. JiBdilfg:i:tOp< :yir-':^ 

>^S 1 2 3) , JiitiiHg:5C.&t/tr^S:{w^.*Lfcv^v^^/U ia 
m^it. :ii-v^^>'ha4l««l 7 Ort(73p< 5/-lr-v?ie 

[0 0 5 3] Isdi 311. Sitiffl^^f^ — 3 0 Olwi; 
ft 5^— > F B 3 7 0 COlSff ^T^-f*^ Ci — h 
T'feS^ ^-f. SfSffi^^Vt''^-^ 3 0 0±CD^-v^ai 
V h H a 7 oil, h iSlWMW 1 7 OJClPJll^^ 

^L. ^-i^^>hffiffll«»l 7 Oil, 

KA 2 6 07!i^^^ffiLTV>fciifH:SC<b«ffc}r^^Lyh7' 
i^^^y^^'ifc (^-i^^V htfla^^Hll 7 01:^:57^^^^ 20 

mi 7 6 35^e>it^aiL. :3i--v^^>hR 3 7 0 iZft-T 

hB 3 7 oilH^ai^ix/tiimx-^J'^S 
Itlfe-S) 3 2) , 

[0 0 54] ?Jctw, 31— i^zti^ h B 3 7 Oil, v?* 
^-hmiSimWl 7 0:i>P>(;)«/t:^^7^v^^yuW^cO*^liE^ 
fro (:!^'r yzfs i 3 3) „ r (OT^i^^yi^^-^cD^IiE 

Wl-Cfj 9o 'K^s^J::^ v^^:/ hB 3 7 Oil, v^zn 

HMWl 7 0;6>f3(7)xv>i5^/u5^;ii^^y -yir-v>i$^-f 

353 7 1 (wJ:oT. hmHl^tlll 7 Of)^h<D 

ii{t:SccD> -yir— h^frfcic^i^-r-5o ^ 
LT. xi^^/^*^&tfe^iE^taSSI53 7 2tCj;oT. 

«^CE^^IE«'**T-rS^. :^^>hA2 6 03^' 
[00 5 5] 3 <D^^) 

(1) 3i-'^:n> hKISiyX^AdiuV^Tl,. e2^*s« 

Tiljf1--i-5l?^iiE$aM^>t"^-^ 1 0 0;?l^iSmW=I^^tr 
^-^2 00<7)t^BBi8SrB=Si-^<©T. aifiW^'Vf IX 

^ 7^ A ^ tft 5 r ;6 ^ # ^ c 
[0 0 5 6] (2) ni-v?^> htasiv^v^AT- 



Vf^ — ^ C^-t^in^^ h) ^iciJI^tfgS^'^f^-^tD/^? 

e^tT9^^v^^>' h A2 6 0, ^— v^inV h B 3 7 0 
^{i:^^:!^^!!^!!]^^^'^-^ 2 O O, ^m{il=i>t^^- 
^3 0 0m<O%'2MiiQim='>^^^ — ^ 1 0 036':3.— (it 
«(RiIaVb'^-^ 2 0 0) <0>ejfM«$:* t«)Tl=ili-5 
<7)-C. S{t^PJJ=^>f:x-t5^ 3 0 0;5?3lS«{Bi|=3:^t'::L-:$r 

2 0 060^53^^<®>«rl::A#'*-^>?l^lt$^'W/t. 
!7-i7 h^:7^ ^^^^ ##f^iiS«<il = >t:-;3.-^ 2 0 
0, 3 0 Ora{:i;h/co-Ct75J*s/ M7 — h7:7-< 5/>J^^ 

[0 0 5 7] (3) zn— v?zr:> htSP>':^7"-i>^JCioV> 

^^-/wL. fik:^. ^inm^-i^=^> h^t'^mmc^-- 
*:flrit:fJ»l3^3iffiLytS^lci±, iS^SlH!!*/) 
^— •:^3cVhA2 6 O, ^fHS!l<7)Ji— v^an:^ h B 3 7 0 
^ffix/ci^ftm'J='>'e^->5^ 2 0 0. SftM='>'l:"^~ 

3 0 omm^M^m:=^>\^*=^—^ i o o^?^-if 

iffRiJzi^b''^-^' 2 0 0) 0^nflftl^^^i-'S)OT% Ji 

[00 5 8] ±i£flf4^fti 1 - 3 ici^v^T^l. Sfa^sa^ V 
[0 0 5 9] (^mucDm^) 1111411. M^m\zx. 

=3:^t'r2-— ^<!rv>9c ) 100:6^ ill^S{l='>tr'^-i5^ 
2 0 0 ^fi^ry M7-i:^ 4 0 OfZjioTg^i^^iT.. «^ 

c w'eri3o<;)gft{ii=3i^fc:*a— 3 0 0 (300 

a, 300b, :3 00c) <ir 11^^ :/ — 4 0 J: 

[0 0 6 0] :i<30'>X-7"J.Jl[a uc;^i-F.<*:fi^i 1 tiSfia 

;2flc:oi,^Tai-<^. Jii£LycJ:9{c. ZZXI±3-:><D^ 
(Iffl!!:^^^^-^ 3 0 0 a, 3 00 b, 3 0 0 c 

^1 0 0^::^^^tLTV^^. «-Sm(l'j=^>t:'^-i5^ 3 0 
Oa, 300b. 300c liPJ-«^T'^So aSliEAIkil 
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^110 izit. m 1 cogggiEiifti^— }:r:^^mm 1 1 1 ic 

40:21=1 >f^ — <57 1 0 0;z3o<D§fS{afl=J 3 
0 0 a, 3 0 0 b, 3 0 0 c^-CilHf U/cii{tx — ^ 
Sr, '^tlib3o60Sf§ttlJ=iVl^^— 3 O 0 a, 300 

b. 3 0 0 ciii^^gi-5«Ht*-v^^, /jrioiai 4^ri^v^ 

[0061] ( s «?5i<jf1=-> Jfcjz, ±^ft^W4co 
i!j<^icov^TI5£9^i-5c 3^^t{il^>f 2 0 Olc*5 
U^TTrry >r— v-H >':7'a^^A2 l 0;6'^liE^t3:^='>' 
fc'^— ^100 (ry y >5r— >3 :/-b---'<>^c^vA 1 
10) IIifilS:S:eri^m'rS^<7>2^fiETT?^y -ir-i^ai^:/ 
1 0<?54!i^HR.<*e«Jl <D«^^ (13 2) irlej^ 

[0 0 6 21 r:/y ^— '>3 >'fr2^^j^2 1 0;6'aHs 

Ai±iii«iiiij3>'f^->i5' 2 0 0. ^m^mnBi±^mm 

^Vtr'a — 3 0 0 a . S<t#ffi$ftC(iS<S(il=» VfzL 

-^3 0 0 b. SfS«-tS^Di±S<tW=^:^fc*^-^^3 0 

0 c t^J:^c 30 
[0 0 6 3] mi$M^>^^^ — :$^ 2 0 Ofj^hCDmi^f— 

/^•T'ay^j^ 1 1 0) ^Otb^^dia 1 6 jwTj^-^ 

^i^l 1 Oli, ^-fSI«filf='>'fc":x~^ 2 0 0;5^P>(OiS 

[0 0 6 41 Scii. rzTv ^~i^3>'^—^<y'^^^J^ 

1 1 ojl, T'^v^^/^S^^^IiE^^ai 1 3izJ:oTiSft 

^J^^-fn- — ^ 2 0 o^n7^v^^y^W^l^o^tmE^^T9 « 

7^';/>^S 1 6 2) « wC7)7^>>i5?yU^:ife(7)«|liEI^. Jiy.Ti?) 

1 ofi. ^— !^**^f^M7^— t^'-^— ;^ 1 2 0{caiJ$ 

tLTi^^i^miM^'vt'^— ^ 2 0 oco^vn^^^ffi/f^L 

T, i^-mW^>'tf^-~i$' 2 0 0£7)T^v^^'7U^*;6>^^ 

h^m^l 1 2i^J:oT, JiieiSflrSCCO;^ y-fe- 
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[0 0 6 51 fi^^/i-^^iDmmk. TZfV^—i^B> 
t 4^^^Ab. «if«?f5^W^^l 3 0-C^^i-^)a^cr^^ 

yM^cDm^m^mwi^x. ±mjMinjc<7>^ y-t-i^y^ 
^io-±xtj:^minT'-^^^mm^i^}^=^-^ 3 oo\z 

aUS-re (>^7-:y:7^S 16 4). 

[0 0 6 61 iifl-r — ^(^§f^{»)=3:/t'^ — ^ 3 0 0-- 
t^)iSft (><.7^:y>^S 1 6 4) flSft«l=^ > — ^ 3 0 
Oa>^/f«t. ww-eilSfSffl^^Vt'^ — ^3 0 0 a, 3 
0 0 b, 3 0 0 c t7)3lH]J^»9i§L-CtT^ia. -^/Vf"^-^ 

c^T^i^r/s 1 6 5) o ^^mm 

^SiiM^ vi^^ — ^ 3 0 o\zi6\^xryv ^—i^si^ 
zTvu^^j^s 1 0^5iHt>z:^a<Ii-5l^t7)^Ei^T:/';^ 

— v'a^tT'D^Vi^S 1 OC04!i^.(ls^fr^Jl(7)«'^ m 
5) irf^^-efcSo 
[0 0 6 71 <fl:f*:(5tj4o^^> 

(1) ^/i-^dr-v;^ hiHticjov^rti. i^jJESJIfcoj:^ 

i--5lg|i£^M=»>l^^-i5^ 1 0 0;i^i^{f«!J=:^l^^-^ 
2 O 0(7:>^P^J^^S^.i-5(7)-C. 3^m(R!j=^^-f^ — ^ 2 

0 0(75ii^B8«i<7)3SffliS-t% ^»:-e'§^MU^•rv^->x7^A 

[00 6 81 ( 2 ) ?i6>lt. X /L-W^ L^^<D 

^ fj'minm V t" - ^ feiii^f*^ =r > ^ ^ o^r^ 

SaVtfzr — ^1 0 0:6'^— if (i5|«{grjri ^-^ 2 

0 0) <D^Mfi^^^i:J6TS^i-50T% ^SftiRO^'^ 
t^^ — :$^ 3 0 0 (3 0 0 a. 3 00 b, 3 0 0 c ) ;i>3ll 
m<ftfl=' ve^-^ 2 0 OCDii^[^^^ffl>!rMA^-r'55^$l 

fca. — ^ 2 0 0. 3 0 0rHi;ct:>;rcoT(D^-;/ h 9 — ^ 

[0 0 6 91 _hidiii<*l?y 1 . 4 [Z:$6l^Xit. wM^m^ 
i^f 1 0 0;J?^-if^raiiT'-^5''<— 12 0^ 

1 0 0:5i:^:/y:n:i/ h^^§^gtT'-^'-<— 1 6 0 ^{f^ 
Tl^5o MIC, ft<*W3ll*5l^r(±, 

««1 7 0;5?rc-v?:ii>'h^[ig^T='-i?-<-xl 7 4^ 
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«i^TV^5, Ztl^^ I TU-X. 5 o g^fcoj^t^jS*) 

T. limni (mi) ^iiE^Ea:S|3>'f^ — 3^ 

1 O 0;6>^^— if^M^T^-:?^^— X 1 2 0^fi^^L. 
^niwf^xT I TU-X. 5 0 9^<?:>J^I^;rj:5^SfS<?5 

[0 0 7 0] <M.i^m5(omm) 01711, 

2 O 0 ^ll^-y h"? — <^ 4 0 OllJ:or. SftfR»J=3Vf 
zu — ^ 3 0 0 ti^^-^y hU — i!^ 4 0 MZ^^X^ 

m:^tLf^'>:^7'M.<D±mi^^^\^x\^^^. mn^-r^x 

;t.v h!7-^^ 4 0 4iCj;oT:51^aia)^n8»|gijE^7 0 0 
SE^7 0 OrtlC'(ix.e>H. I TU-X. 5 0 9^(7)^1^ 

7 1 0lzl^S$^^r^>^. ±IE^-if>Z^[)ni^x-^^- 
>^7 1 0(1. T^s^^^^ww^^o^tiiB^iiJi, r-rv^—^ 

»i. ft«^(5iji (nil) tmmx^^<DX\ miAizisi^ 
tell tm-^»\zm-w^^ni.x^(K>i^m%'SK 

[00 7 1 1 <:i:(*M 5 (Dmm ±ig 5 (O 

S)!lft:{coV>riftffli-S= iSfHRO^^^t'^-iJ^ 2 0 01:1*5 

v^rr ^— >'r7'n^^A2 1 0 t'^t^M^m^^ :^ 

b-^-^J/lOO (r:7^i; v^a /<>^o 1 

10) iwiili^c^iSft-r^^cD^g^r:/!; ^r-v^s:/:?^ 

Xh^. TT/y >5r^v'H>yn^TA2 1 075'iS-m-r^ 
mn7'-^<oyyi-—^^yhhAt^mi<om^ (ma) ^ 

[0 0 7 2] i&iam^'l^'^'^ — ^ 2 0 0 <b</5iiff X— 

> 3 >^ci A 1 1 0 ) toEbfl^llteJ 1 8 ir^i" 

5 >^S 18 1). 

[0 0 7 3] T-T'y v-a /<:7'ai/7i^ 

1 1 Oil. :i^giaiEliEi^7 0 OCO^--1f>£:t|58l»T'-^-< 
— -X 7 1 035^f>^— if (HlfSlffi^aV-f ^ — ^ 2 0 0) <0 
{tmfS^^'Sm i^^yzfs 1 8 2) L/t^. 'Ti^^'/v* 50 
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^m£^mn \ i 3*^j:oTii^fHij=i>'tf^— ^5^200 

cO^v^^/uW^iCOl^aiE^tT^ (X7"-/^S 18 3). " 

T:/y >5r— '>3 >'<:/a^^Ai 1 0(1. ys^yf 
1 8 2T*8j#L:/hilHfiiy3>'t"rr-^2 0 0<7><iiWf«[4r 
^^L-C. iSltllW^' vt'^-^ 2 0 0(n^V'^ fvm^t^ 
'yir->^y>f v^^y^ ;^ ^/ir- 

v^y-Yv^a^x h*a^.Spi 1 2icj:oT. ±iei®«5:Op« 

Ti-^o ^-&-r-^niiaimi^]^>'t'^-r5^ 2 o oic^i 

[0 0 7 4] 'Ti^^'yvS^t^ttliE^. T^V^->Bi^ 
i^— y<:/n^vix 1 1 0(1. T^v^^/V^-^i^/j^Mfigfil 
1 4^fi»|L. tif^Sjlil^^gS 1 3 OT'W^-r^aT'a^ 

18 4), ^(7)^. ryV^—i^B Vif-z^T/ai/^A 
1 ion. .b3eil<tj;c<hWrfc{C^J*Lf-7^i;^r5'/t'»^^ 

^i:>itxfj:^mm'f''if^^mm=^>^^-^ sooiz 
mm-r^ (x-r ^y^s 1 s 5) . sfs#ts«(i. 

m>c ^ ^ flSi- ^ w ^ J: o -C ^ 0 # ^ . SmiM 3 >^ b" ^ 
— ^ 3 0 OJddoV^TTrT'y ^— v'3>:7'd:/^A3 1 0 

A3 1 0 (D^mi^^i^m l(Om^ (115) ^|5]«-C*> 

[0 0 7 5] (ft»W5C0ai^> 

mxm^it^titi^^<D>:d:mmmmmxitf£< ^ m-m 
mmmx'mf.i^xmi'^-rz>mm^m=^>\:::zi.—^ i o o 

<7)^^Tiw:}ol>T3^f5<R>J=f^^t°^ — ^ 2 0 0<7)<i>raM^ 
W^li-^co-C. illfgjllijn^fc'zr — ^ 2 0 OCO^fiaSlcOal 

[0 0 7 6] (2) Vt^. T^v^^/l-¥^^«I^Lfc-# 
fa1^7>^^^^8aiE(:::feu^T^l. S^S{iJ=^ >f ^-^2i-iifH<IHJ 

1 0 0;6^'1E:coS^^T^w:^oV^-C^-if (Sff >- f 

^-:$^2oo) iD{cSimm^-^ttbx'sm-t^(DX\ ^in 

m^t^^^ — i^ 3 0 0;!i'iSlHil = >fc'^ — ^ 2 O 0(7)^ 

-y^j'. ^(cjSSimiiiy^^t-^-i^ 2 0 0. 3 oora 

tt^>X^^. 

[0 0 7 7] /jii^J. Bri^m 1--5 (mi. 6. 10. 1 
4. 1 7) Til. V>-rixt>3ilfIffi|3>'t'^-:$^2 0 0i: 

mnm=^>'t:^-i^ 3 00 t^'iMi (a*«4(o-7/w 
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^m{^i^mmm=^>ii'=^-^ 200 t^mm=^>^' 
0 o*^A/X'?gmiifi#rnLTv^^>= ^Mri^ma. i>-fix 

[(35] mi^<o^tsm='>\^^-^{zia\'f^Ty^V^ 

m?] [li6*cois^t^ftlJ=I>'t•^--i5'^ci5lt-5 2^:/v^al 

[IMS] ^6^i<^Sg|Ei!i:^.=i>fc^:x~^ici^J-J'-58gliE/'5 

[mil] mi o^(r>m1nm^>}l'^—^K^i'f^^— 



So 

[Hi 5 1 m\ 4^(Dmm^m=^>\i'^—^(DTzfv^ 

[Hi 6] SI 1 A^(Dmu^m^>\^=^—^\z^\'f^T 

[mi 81 m \ 7*(D^.iiEiO:S=r>-t:-^-^ciJit5r 

hxh^^. 

100 SSIiEiii^.r'Vfc'zr— ^ 

1 1 0 r:/y >5r-->3 

1 1 1 mw^m^-'^^^mu 

112 ^ :yir— v^i?^-r v?^x h^^a^^S 

1 1 3 'fiy^/^^m^msi^mn 

1 1 4 v'^:y'^/vmi^±f$.^m.n 

1 2 0 if<2:5rffl^-7'-^-<~X 
13 0 

2 0 0 m\tm^:y^^^=2-—^ 

210 y >$r— v-B :/:/d^^a 

2 1 1 mmm^^mu 

212 p< yir— v>i5^-f C^^:^ h^^SiJ 

2 1 3 y'v>^;\-m^^m.^mM 

2 2 0 fif^a^i^^as 

3 00 smiRy^:^^'^-^ 

310 r v-H V'T'cr^^A 

3 1 1 v&m.mt^mM 

3 12 ^ -y-t— v?^-<v?ai:^ 

3 1 3 ^^y^/vm^msMMU 

3 2 0 r-:f^) >i^-/<:?'o^^^i>Bgii 

4 0 0, 4 0 1 ^y VP — ^ 
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(54) AUTHENTICATION PROCESSING METHOD 

(57)Abstract: 

PROBLEM TO BE SOLVED: To authenticate a 
transmission side computer between the 
computer on the transmission side and a 
computer on a receiving side by allowing the 
computer on the receiving side to execute 
inspection in the computer on the receiving 
side, after receiving an open key from an 
authentication processing computer. 
SOLUTION: An application server program 110 
receives communication data composed of a 
communication message and a digital signature 
from the computer on the transmission side 
200. The program 110 fetches a message 
digest from the digital signature of the 
computer 200. Next, a message digest processing part 1 12 generates the message 
digest of the communication message from an application program 210 and compares 
it with the fetched from the digital signature. After inspection, the digital signature of 
the message digest is generated by using a secret key and communication data 
composed with the communication message is transmitted to the computer on the 
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receiving side 300. 
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CLAIMS 



[Claim(s)] 

[Claim 1] The transmitting^side computer which generates a digital signature using a 
self private key to the fixed-length message digest taken out from the 
correspondence of arbitration, adds to said correspondence, and is transmitted to a 
network as commo data. A message digest is taken out from the digital signature in 
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the commo data from said network using a public key. In the communication system to 
which the receiving^side computer which can perform the verification as compared 
with the message digest newly generated from the correspondence in the commo data 
from this network in it was connected through said network The authentication 
processing computer which was formed between said transmitting-side computer and 
the receiving-side computer and which operates independently by the single layered 
structure Receive the commo data from said transmitting-side computer and a 
message digest is taken out from the digital signature in the commo data from a 
transmitting-side computer using the public key of the transmitting-side computer 
registered into the public key database under self management. The verification is 
performed as compared with the message digest newly generated from the 
correspondence in the commo data from a transmitting-side computer in it After the 
check of those coincidence, newly generate a digital signature using a self private key 
from a message digest, add to the correspondence in the commo data from said 
transmitting-side computer, and it transmits to said receiving-side computer as 
commo data. The authentication art to which said receiving-side computer is 
characterized by attesting the transmitting-side computer between said 
transmitting-side computer and a receiving-side computer by performing said 
verification in that receiving-side computer in response to that public key from this 
authentication processing computer. 

[Claim 2] It is the authentication art characterized by being the computer which a 
transmitting-side computer, a receiving-side computer, and an authentication 
processing computer mount a distributed-processing environment respectively in an 
authentication art according to claim 1. and performs distributed processing. 
[Claim 3] It is the authentication art characterized by being the computer which 
constitutes the agent coordination system by which the transmitting-side computer 
and the receiving-side computer mounted the agent processing environment, and, as 
for the transmitting-side computer, the receiving-side computer, and the 
authentication processing computer, the authentication processing computer 
mounted the agent coordination device respectively in the authentication art 
according to claim 1. 

[Claim 4] It is the authentication art characterized by being the multicast 
communication link in which, as for the communication link between computers by the 
side of transmission and reception, two or more computers of a receiving side exist in 
an authentication art according to claim 1. 2. or 3. 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the authentication art which performs 
partner authentication using a digital signature, and relates to the suitable 
authentication art for partner authentication by the electronic mail in the Internet or 
intranet, electronic banking, or the agent coordination system especially. 
[0002] 

[Description of the Prior Art] him who is represented by a signature and seal stamp — 
it is for realizing authentication (if it seeing from a sink partner authentication) on 
online media, such as a communication network [ in / in a digital signature / dealings 
in the paper base ] Partner authentication which used the digital signature is 
performed as follows. That is, the transmitting person of Correspondence x transmits 
the digital signature Sig (Ks, x) generated from the above-mentioned correspondence 
X with the digital signature generation algorithm which used a transmitting person's 
private key (key which only he gets to know) Ks. An addressee processes a digital 
signature Sig (Ks. x) with the digital signature verification algorithm which used a 
transmitting person's public key (said private key Ks and key with which a pair can be 
known also except nothing and a transmitting person) Kp, and performs partner 
authentication by verifying 'VeKKp. Sig (Ks. x)) =x." 

[0003] Generation processing of a digital signature is used together with message 
digest processing in fact in many cases. It is because generation of the digital 
signature Sig (Ks, x) from the long sentence x takes time amount so much and it 
becomes cost quantity. Here, the processing to which message digest processing 
generates fixed-length about 100-160 bits, for example, 128 bits, message digest M 
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(x) to Correspondence x in the original sentence of arbitration length and the 
above-mentioned example is said. 

[0004] In this case, a transmitting person generates the digital signature Sig (Ks, M 
(x)) to the above message digest M (x) using the above-mentioned private key Ks, and 
transmits this together with the above-mentioned correspondence x. An addressee 
generates himself new message digest M (x) from the sent correspondence x. and 
verifies "Ver(Kp. Sig (Ks, M (x))) =M (x)." That is, an addressee generates message 
digest M (x) from the above-mentioned digital signature Sig (Ks, M (x)) using a 
transmitting person's public key Kp. Partner authentication is performed by comparing 
with new message digest M (x) itself generated by the same technique with the 
transmitting person having carried out from the correspondence x to which this has 
been sent together with the above-mentioned digital signature Sig (Ks, M (x)). If the 
above-mentioned comparison result comes out with "coincidence", a transmitting 
person's digital signature will be checked as it is a genuine article (partner 
authentication), and. specifically, the integrity (there do not need to be data 
corruption and an alteration) of correspondence will be checked. 

[0005] As mentioned above, when an addressee verifies a transmitting person's digital 
signature, it is necessary to use a transmitting person's public key. In the application 
of the former many, he is for an addressee to receive the public key certificate with 
which the digital signature of a reliable public key certificate authority was given, to 
verify the digital signature of a certificate authority, and to use a transmitting person's 
public key (ITU-X.509 (Internation Telecommunication Union X series 
recommendation 509)). On the other hand, a transmitting person can also transmit a 
public key certificate and each hierarchized public key certificate of a public key 
certificate authority which is mentioned later with correspondence. In this case, an 
addressee needs to receive a public key certificate lapse list from a reliable public key 
certificate authority, in order to check whether those public key certificates are 
invalidated. Therefore, when the addressee needs acquisition of a public key and a 
transmitting person transmits hereafter including a public key certificate, acquisition 
of a public key certificate lapse list shall be demanded of coincidence. 
[0006] 

[Problem(s) to be Solved by the Invention] However, there were the following troubles 
in the above-mentioned conventional technique. 

(1) It is systematized by the layered structure, each certificate authority cooperates, 
and the public key certificate authority specified in the ITU-X.509 grade for 
employment of the public key used by verification of a digital signature and 
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management operates. However, when this structure managed the database of a 
public key certificate by many certificate authorities of a layered structure, it held 
difficulty in maintenance of that coordination, especially maintenance of the identity 
of each certificate authority in cancellation and an update process of a public key 
certificate and the demand of that quick nature was moreover also considered, it had 
the trouble of the flexibility in increase, consequently the aspect of practical use of a 
public key having been lost, and being much more hard to manage difficulty. 
[0007] (2) In the partner authentication between the 2 persons who used the digital 
signature, the addressee needed to receive a transmitting person's public key for 
every transmitting person, and public key acquisition processing became complicated, 
and there was a trouble of network traffic increasing. 

[0008] (3) In an agent coordination system, when performing the communication link 
between migration mold agents, a transmitting-side agent pools data to the 
coordination space of an agent coordination device, and another side and a 
receiving-side agent have the method which asks periodically an agent coordination 
device, publishes a message, and realizes a communication link. In such a 
communication mode, with each agent, when it became complicated, therefore 
authentication processing of the above-mentioned former was applied to such a 
communication mode, succession and the trouble that processing became remarkably 
complicated and became cost quantity had the communication link between agent 
coordination devices. 

[0009] (4) When the partner authentication which used the digital signature was 

applied to a multicast communication link, each addressee needed to receive a 

transmitting person's public key respectively, and public key acquisition processing 

became complicated, and there was a trouble of network traffic increasing. 

[0010] This invention is made that the trouble of the above-mentioned conventional 

technique should be canceled. 

[0011] 

[Means for Solving the Problem] The next configuration is used for this invention in 
order to solve the above-mentioned technical problem. 

<Configuration 1> The transmitting-side computer which generates a digital signature 
using a self private key to the fixed-length message digest taken out from the 
correspondence of arbitration, adds to the above-mentioned correspondence, and is 
transmitted to a network as commo data, A message digest is taken out from the 
digital signature in the commo data from the above-mentioned network using a public 
key. In the communication system to which the receiving-side computer which can 
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perform the verification as compared with the message digest newly generated from 
the correspondence in the commo data from this network in it was connected through 
the above-mentioned network The authentication processing computer which was 
formed between the above-mentioned transmitting-side computer and the 
receiving-side computer and which operates independently by the single layered 
structure Receive the commo data from the above-mentioned transmitting-side 
computer, and a message digest is taken out from the digital signature in the commo 
data from a transmitting-side computer using the public key of the transmitting-side 
computer registered into the public key database under self management. The 
verification is performed as compared with the message digest newly generated from 
the correspondence in the commo data from a transmitting-side computer in it. After 
the check of those coincidence, newly generate a digital signature using a self private 
key from a message digest, add to the correspondence in the commo data from the 
above-mentioned transmitting-side computer, and it transmits to the 
above-mentioned receiving-side computer as commo data. The authentication art to 
which the above-mentioned receiving-side computer is characterized by attesting the 
transmitting-side computer between the above-mentioned transmitting-side 
computer and a receiving-side computer by performing the above-mentioned 
verification in that receiving-side computer in response to that public key from this 
authentication processing computer. 

[0012] <Configuration 2> It is the authentication art characterized by being the 
computer which a transmitting-side computer, a receiving-side computer, and an 
authentication processing computer mount a distributed-processing environment 
respectively in an authentication art according to claim 1, and performs distributed 
processing. 

[0013] <Configuration 3> It is the authentication art characterized by being the 
computer which constitutes the agent coordination system by which the 
transmitting-side computer and the receiving-side computer mounted the agent 
processing environment, and, as for the transmitting-side computer, the 
receiving-side computer, and the authentication processing computer, the 
authentication processing computer mounted the agent coordination device 
respectively in the authentication art according to claim 1. 

[0014] <Configuration 4> It is the authentication art characterized by being the 
multicast communication link in which, as for the communication link between 
computers by the side of transmission and reception, two or more computers of a 
receiving side exist in an authentication art according to claim 1, 2, or 3. 
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[0015] 

[Embodiment of the Invention] Hereafter, it explains using a drawing per gestalt of 

operation of this invention. 

«example» 

<Configuration of an example 1> Drawing 1 is the block diagram showing the 
communication system with which the example 1 of the authentication art by this 
invention was applied. Here, the whole system configuration to which the server 
computer (henceforth an authentication processing computer) 100 which functions as 
an authentication processing computer was connected to by the network 400 in the 
transmitting-side computer 200, and was respectively connected by the network 401 
in the receiving-side computer 300 is shown. 

[0016] The above-mentioned authentication processing computer 100 operates 
independently by the single layered structure, and comes to have the application 
server program 1 10. the user public key database 120, and the private key 
Management Department 130. Here, the application server program 1 10 is equipped 
with the message digest processing section 112, the digital signature verification 
processing section 113, and the authentication communication service processing 
section 1 1 1 that consists of digital signature generation processing section 114 grade. 
The user public key database 120 is a database which registered a users 
(transmitting-side computer 200) public key, and in case it is under management of 
the application server program 110 and verifies a user's digital signature, it is used. 
The private key Management Department 1 30 manages the private key of the 
application server program 110 used in case a digital signature is generated in the 
authentication processing computer 1 00. 

[0017] The transmitting-side computer 200 comes to have an application program 210 
and the private key Management Department 220. Here, an application program 210 is 
equipped with the authentication communications processing section 211 which 
consists of the message digest processing section 212 and digital signature 
generation processing section 213 grade. The private key Management Department 
220 manages the private key of the transmitting-side computer 200 used in case the 
digital signature of the transmitting-side computer 200 is generated. 
[0018] The receiving-side computer 300 comes to have an application program 310 
and the application server program public key 320. Here, an application program 310 is 
equipped with the authentication communications processing section 31 1 which 
consists of the message digest processing section 312 and digital signature 
verification processing section 313 grade. The application server program public key 
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320 is used in case a digital signature is verified. 

[0019] <Actuation of an example 1> Next, actuation of the above-mentioned example 
1 is explained. Drawing 2 is a flow chart which shows actuation of the application 
program 210 in the transmitting-side computer 200. As shown in this drawing, an 
application program 210 creates the body of correspondence first and adds 
transmitting person information and recipient information in the format beforehand 
decided to be it (step S21). Hereafter, what added those information to the 
correspondence body is called correspondence. 

[0020] Next, an application program 210 generates the digital signature to the 
above-mentioned message digest using the private key of the transmitting-side 
computer 200 and the digital signature generation processing section 213 which 
generated the message digest of correspondence using the message digest 
processing section 212 (step 822), then have been managed at the private key 
Management Department 220 (step S23). Then, the commo data with which it comes 
to double the above-mentioned correspondence and a digital signature is transmitted 
to the authentication processing computer 100 (application server program 1 10) (step 
S24), and the correspondence transmitting procedure in the transmitting^side 
computer 200 is ended. 

[0021] The outline of a format of the data (commo data) transmitted to the 
above-mentioned application server program 1 10 at drawing 3 is shown. Here, a 
transmitting person is expressed by A. the addressee is expressed by B, and A and B 
contain each address information. Correspondence consists of the transmitting 
person information A and recipient information B, and a correspondence body so that 
it may illustrate, and it is the digital signature (a message digest is included.) of the 
message digest of this correspondence and correspondence, this specification — 
setting — the same . Commo data is constituted. In the transmitting person 
information A, by the example 1, the transmitting-side computer 200 and recipient 
information B serve as the receiving^side computer 300. 

[0022] Drawing 4 is a flow chart which shows actuation of the application server 
program 1 10 in the authentication processing computer 100. As shown in this drawing, 
the application server program 110 (authentication processing computer 100) 
receives the commo data (refer to drawing 3 ) which doubles the correspondence and 
the digital signature from the transmitting-side computer 200 first and becomes (step 
S41). 

[0023] Next the application server program 110 verifies the digital signature of the 
transmitting-side computer 200 by the digital signature verification processing 
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section 113 (step S42). The digital signature verification processing section 113 
performs verification of this digital signature in the following procedures. Introduction 
and the application server program 1 10 use the public key of the transmitting^side 
computer 200 (user) registered into the user public key database 120, and take out a 
message digest from the digital signature of the transmitting-side computer 200. Next, 
the message digest processing section 1 12 newly generates the message digest of the 
correspondence from an application program 210. And the message digest taken out 
from the above-mentioned digital signature is compared with the newly generated 
message digest, and if those coincidence is checked, verification of a digital signature 
will terminate normally. If inharmonious, an error will be notified to the 
transmitting-side computer 200. 

[0024] After verification of a digital signature, the application server program 110 
starts the digital signature generation processing section 114. uses the private key of 
the self-program managed at the private key Management Department 130, and newly 
generates the digital signature of the message digest of the above-mentioned 
correspondence (step S43). Then, the application server program 110 transmits the 
commo data with which it comes to double the digital signature newly generated at the 
above-mentioned correspondence and step 43 to the receiving-side computer 300 
(step S44), Recipient information can be known by referring to the above-mentioned 
correspondence. 

[0025] Drawing 5 is a flow chart which shows actuation of the application program 310 
in the receiving-side computer 300. First, the application program 310 on the 
receiving-side computer 300 receives the commo data with which it comes to double 
the correspondence from the authentication processing computer 100 (application 
server program 110), and a new digital signature (digital signature by the application 
server program 110) (step S51). 

[0026] Next an application program 310 verifies the new digital signature from the 
authentication processing computer 100 (step S52). The digital signature verification 
processing section 313 performs verification of this digital signature in the following 
procedures. The application server program public key 320 is used for introduction 
and an application program 310. and they take out a message digest from the digital 
signature from the application server program 1 10. Next, the message digest 
processing section 312 newly generates the message digest of the correspondence 
from the application server program 110. And the message digest taken out from the 
above-mentioned digital signature is compared with the newly generated message 
digest, and if those coincidence is checked, verification of a digital signature will 
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terminate normally. Normal termination of verification terminates the authentication 
communications processing from the transmitting-side computer 200 to the 
receiving-side computer 300. 

[0027] <Effectiveness of an example 1> Since the authentication processing 
computer 100 by which it operates independently by not a public key certificate 
authority but the single layered structure of a large number systematized by the 
layered structure as for which each operates in cooperation manages the public key 
of the transmitting-side computer 200 like (1) conventional technique, the system 
which it is flexible and is easy to manage on the aspect of practical use of the public 
key of the transmitting-side computer 200 can be built. 

[0028] (2) In the partner authentication between the 2 persons who used the digital 
signature, the receiving-side computer needed to receive the public key of a 
transmitting~side computer for every transmitting~side computer conventionally. By 
the example 1. since the above-mentioned authentication processing computer 100 
manages a user s (transmitting-side computer 200) public key collectively, the 
complicatedness to which the receiving-side computer 300 receives the public key of 
the transmitting-side computer 200 separately can be excluded, and network traffic, 
especially the network traffic covering between the transmission-and-reception side 
computers 200,300 can be decreased. 

[0029] <Configuration of an example 2> Drawing 6 is the block diagram showing the 
communication system with which the example 2 of the authentication art by this 
invention was applied. Here, a computer 200 and a computer 100 are connected by the 
network 400. a computer 100 and a computer 300 are respectively connected by the 
network 401, and three computers 100,200,300 which mount the 
distributed-processing environment 1 50.240,340 show the whole system configuration 
in which the distributed application program 500 operates ranging over these three 
computers 100 and 200 and a computer 300. Based on each function in this example 2, 
the computer which becomes 100 about three computers 100,200,300 is hereafter 
called authentication processing computer, and the computer which becomes 200 is 
called a transmitting-side computer and receiving-side computer which becomes 300. 
[0030] The above-mentioned authentication processing computer 100 is equipped 
with the authentication pipe object 140. the message digest object 141 and the digital 
signature object 142 which operate independently by the single layered structure and 
operate with the above-mentioned distributed application program 500 besides the 
above-mentioned distributed-processing environment 150. the private key 
Management Department 130 which manages the private key of the authentication 
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pipe object 140. and the object public key database 160 with which the public key of 
all the objects in an illustration system (user) was registered. This object public key 
database 160 is used, in case it is under management of the authentication pipe object 
1 40 and a user's digital signature is verified. 

[0031] The transmitting-side computer 200 is equipped with the object A230. the 
message digest object 231 and the digital signature object 232 which operate with the 
above-mentioned distributed application program 500 besides the above-mentioned 
distributed-processing environment 240, and the private key Management 
Department 220 which manages the private key of an object A230. 
[0032] The receiving-side computer 300 is equipped with the object B330. the 
message digest object 331 and the digital signature object 332 which operate with the 
above-mentioned distributed application program 500 besides the above-mentioned 
distributed-processing environment 340. and the authentication pipe object public key 
350. 

[0033] In addition, the above-mentioned authentication pipe object 140, an object 
A230, and an object B330 can have means of communications, and can communicate 
mutually. Moreover, the message digest object 141,231.331 shall have a message 
digest generation method respectively, and the digital signature object 142,232,332 
shall have a signature verification method and a signature generation method 
respectively. 

[0034] <Actuation of an example 2> Next, actuation of the above-mentioned example 
2 is explained. Drawing 7 is a flow chart which shows actuation of the object A230 in 
the transmitting-side computer 200. As shown in this drawing, an object A230 creates 
the body of correspondence first, and adds transmitting-side computer 200 (object 
A230) information and receiving-side computer 300 (object B330) information in the 
format beforehand decided to be it (step S71). Hereafter, what added those 
information to the correspondence body is called correspondence. 
[0035] Next, an object A230 generates the digital signature to the above-mentioned 
message digest using the signature generation method of the private key of the object 
A230 which generated the message digest of correspondence using the message 
digest generation method of the message digest object 231 (step S72). then has been 
managed at the private key Management Department 220, and the digital signature 
object 232 (step S73). Then, the commo data with which it comes to double the 
above-mentioned correspondence and a digital signature is transmitted to the 
authentication pipe object 140 on the authentication processing computer 100 (step 
S74), and the correspondence transmitting procedure of an object A230 is ended. The 
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format of commo data is the same as that of drawing 3 except for a transmitting 
person becoming an object A230 and an addressee becoming an object B330. 
[0036] Drawing 8 is a flow chart which shows actuation of the authentication pipe 
object 140 in the authentication processing computer 100. As shown in this drawing, 
the authentication pipe object 140 receives the commo data which doubles the digital 
signature of the correspondence from the transmitting~side computer 200 (object 
A230X and an object A230 first, and becomes (step S81). 

[0037] Next, the authentication pipe object 140 verifies the digital signature of an 
object A230 (step S82). The following procedures perform verification of this digital 
signature. Introduction and the authentication pipe object 140 use the public key of 
the object A230 registered into the object public key database 160, and take out a 
message digest from the digital signature of an object A230. Next, the message digest 
generation method of the message digest object 141 is used, and the message digest 
of the above-mentioned correspondence is newly generated. And the message digest 
taken out from the above-mentioned digital signature is compared with the newly 
generated message digest, and if those coincidence is checked, verification of a digital 
signature will terminate normally. If inharmonious, an error will be notified to the 
transmitting-side computer 200. 

[0038] After verification of a digital signature, by the signature generation method of 
the digital signature object 142, the authentication pipe object 140 uses the private 
key of the self-object managed at the private key Management Department 130, and 
newly generates the digital signature of the message digest of the above-mentioned 
correspondence (step S83). Then, the authentication pipe object 140 transmits the 
commo data with which it comes to double the above-mentioned correspondence and 
the newly generated digital signature to an object B330 (step S84). Recipient 
information can be known by referring to the above-mentioned correspondence. 
[0039] Drawing 9 is a flow chart which shows actuation of the object B330 in the 
receiving-side computer 300. First, the object 8330 on the receiving^side computer 
300 receives the commo data with which it comes to double the correspondence from 
the authentication processing computer 100 (authentication pipe object 140), and a 
new digital signature (digital signature by the authentication pipe object 140) (step 
S91X 

[0040] Next an object B330 verifies the new digital signature from the authentication 
processing computer 100 (step S92). The following procedures perform verification of 
this digital signature. Introduction and an object B330 use the authentication pipe 
object public key 350. and take out a message digest from the digital signature of the 
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authentication pipe object 140. Next the message digest generation method of the 
message digest object 331 is used, and the message digest of the above-mentioned 
correspondence is newly generated. And the message digest taken out from the 
above-mentioned digital signature is compared with the newly generated message 
digest and if those coincidence is checked, verification of a digital signature will 
terminate normally. Normal termination of verification terminates the authentication 
communications processing from an object A230 to an object B330. 
[0041] <Effectiveness of an example 2> Also in (1) distributed processing system, 
since the authentication processing computer 100 by which it operates independently 
by not a public key certificate authority but the single layered structure of a large 
number systematized by the layered structure as for which each operates in 
cooperation manages the public key of the transmitting-side computer 200 like the 
conventional technique, the system which it is flexible and is easy to manage on the 
aspect of practical use of the public key of the transmitting-side computer 200 can be 
built 

[0042] (2) In the partner authentication between the 2 persons who used the digital 
signature in the system which performs distributed processing, the receiving-side 
computer (object) needed to receive the public key of a transmitting-side computer to 
every transmitting-side computer (object) conventionally. By the example 2. since the 
authentication processing computer 100 between the transmitting-side computer 200 
equipped with the object A230 which communicates mutually, and the object B330, 
and the receiving-side computer 300 manages a user's (transmitting-side computer 
200) public key collectively, the complicatedness to which the receiving-side 
computer 300 receives the public key of the transmitting-side computer 200 
separately can be excluded, and network traffic, especially the network traffic 
covering between the transmission-and-reception side computers 200,300 can be 
decreased. 

[0043] <Configuration of an example 3> Drawing 10 is the block diagram showing the 
communication system with which the example 3 of the authentication art by this 
invention was applied. Here, the computer 100 which mounts two or more computers 
200. 300. and 600.601.602.603 and agent coordination devices 170 which the agent 
processing environments 250, 360, and 610.611,612,613 are mounted shows the whole 
agent coordination system configuration connected by the network 400.401,402.403. 
Based on each function in this example 3. the computer which becomes 100 about a 
computer 100,200.300 is hereafter called authentication processing computer, and the 
computer which becomes 200 is called a transmitting-side computer and 
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receiving-side computer which becomes 300. 

[0044] The above-mentioned authentication processing computer 100 operates 
independently by the single layered structure, and is equipped with the agent 
coordination device 170. This agent coordination device 170 comes to have the 
message digest processing section 171. the digital signature verification processing 
section 1 72, the digital signature generation processing section 1 73, the agent public 
key database 174, the private key Management Department 175, and the message 
storage region 176. The public key of all the agents in an illustration system (user) is 
registered into the above-mentioned agent public key database 174. This agent public 
key database 1 74 is used, in case it is under management of the agent coordination 
device 170 and a user's digital signature is verified. The private key Management 
Department 175 manages the private key of the agent coordination device 170. The 
message storage region 176 stores temporarily correspondence, a digital signature, 
etc. from a transmitting-side agent to a receiving-side agent. 

[0045] The transmitting-side computer 200 is equipped with the agent A260 besides 
the above-mentioned agent processing environment 250. Here, an agent A260 comes 
to have the message digest processing section 261, the digital signature generation 
processing section 262, and the private key Management Department 263. The private 
key Management Department 263 manages an agent's A260 private key. 
[0046] The receiving-side computer 300 is equipped with the agent B370 besides the 
above-mentioned agent processing environment 360. Here, an agent B370 comes to 
have the message digest processing section 371, the digital signature verification 
processing section 372, and the agent coordination device public key 373. 
[0047] The agent of an illustration system may be whichever of the resident mold 
agent who resides permanently on a migration mold agent with the capacity which 
moves between two or more computers which mount the agent processing 
environment, or one computer. Moreover, each agent of an illustration system can 
have means of communications, and can communicate mutually. When two agents are 
migration mold agents, they are made possible by the communication link as follows. 
Here, the migration mold agent who may communicate decides to ask periodically the 
agent coordination device 170 and to send a message. A transmitting-side agent 
posts transmit data for the agent coordination device 170, and when a receiving-side 
agent asks the agent coordination device 1 70 and sends a message, he gets to know 
existence of the transmit data addressed to a self-agent, and is made as [ obtain / it ]. 
As mentioned above, the agent A260 and agent B370 of an illustration system may be 
a migration mold, or may be a resident mold, but when it is both a migration mold, they 
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shall be made possible by the communication link by the above correspondence 
procedures. 

[0048] <Actuation of an example 3> Next, actuation of the above-mentioned example 
3 is explained. Drawing 1 1 is a flow chart which shows the actuation of an agent A260 
in the transmitting-side computer 200. As shown in this drawing, an agent A260 
creates the body of correspondence first, and adds transmitting-side computer 200 
(agent A260) information and receiving-side computer 300 (agent B370) information in 
the format beforehand decided to be it (step S1 1 1). Hereafter, what added those 
information to the correspondence body is called correspondence. 
[0049] Next an agent A260 generates the digital signature to the above-mentioned 
message digest using the private key of the agent A260 who generated the message 
digest of correspondence using the message digest processing section 261 (step 
S1 12), then has managed at the private key Management Department 263, and the 
digital signature generation processing section 262 (step S1 13). Then, the commo 
data with which it comes to double the above-mentioned correspondence and a digital 
signature is transmitted to the agent coordination device 170 on the authentication 
processing computer 100 (step S1 14), and an agent's A260 correspondence 
transmitting procedure is ended. The format of commo data is the same as that of 
drawing 3 except for transmitting person information becoming an agent A260, and 
recipient information becoming an agent B370. 

[0050] Drawing 1 2 is a flow chart which shows actuation of the agent coordination 
device 170 in the authentication processing computer 100. As shown in this drawing, 
the agent coordination device 170 receives the commo data which doubles the digital 
signature of the correspondence from the agent A260 on the transmitting-side 
computer 200, and an agent A260 first, and becomes (step SI 21). 
[0051] Next the agent coordination device 170 verifies an agent's A260 digital 
signature by the message digest processing section 171 and the digital signature 
verification processing section 172 (step 8122). The following procedures perform 
verification of this digital signature. An agent's A260 public key registered into the 
agent public key database 174 is used for introduction and the agent coordination 
device 170, and they take out a message digest from an agent's A260 digital signature. 
Next, the message digest processing section 171 newly generates the message digest 
of the above-mentioned correspondence. And the message digest taken out from the 
above-mentioned digital signature is compared with the newly generated message 
digest and if those coincidence is checked, verification of a digital signature will 
terminate normally. It will leave the error log, if inharmonious, and when it next asks 
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from an agent A260 and a message is received, the agent A260 is notified of an error. 
[0052] After verification of a digital signature, the agent coordination device 1 70 
starts the digital signature generation processing section 173, and the private key of 
the agent coordination device 170 managed at the private key Management 
Department 175 is used for it, and it newly generates the digital signature of the 
message digest of the above-mentioned correspondence (step S123). The 
above-mentioned correspondence and the newly generated digital signature are held 
to the message storage region 176 within the agent coordination device 170. 
[0053] Drawing 13 is a flow chart which shows the actuation of an agent B370 in the 
receiving-side computer 300. First, the agent B370 on the receiving-side computer 
300 asks the agent coordination device 170, and sends a message (step 131). On the 
other hand, the agent coordination device 170 reads the commo data with which it 
comes to double the correspondence which had already received from the agent A260. 
and the newly generated digital signature (digital signature by the agent coordination 
device 170) from the message storage region 176, and passes it to an agent B370 
(step 132). (an agent B370 receives the read commo data) 
[0054] Next, an agent B370 verifies the new digital signature from the agent 
coordination device 170 (step SI 33). The digital signature verification processing 
section 372 performs verification of this digital signature in the following procedures. 
Introduction and an agent B370 use the agent coordination device public key 373, and 
take out a message digest from the digital signature from the agent coordination 
device 170. Next, the message digest processing section 371 newly generates the 
message digest of the correspondence from the agent coordination device 1 70. And if 
the message digest taken out from the above-mentioned digital signature is compared 
with the newly generated message digest and those coincidence is checked by the 
digital signature verification processing section 372, verification of a digital signature 
will terminate normally. Normal termination of verification terminates the 
authentication communications processing from an agent A260 to an agent B370. 
[0055] <Effectiveness of an example 3> Also in (1) agent coordination system, since 
the authentication processing computer 100 by which it operates independently by 
not a public key certificate authority but the single layered structure of a large 
number systematized by the layered structure as for which each operates in 
cooperation manages the public key of the transmitting-side computer 200 like the 
conventional technique, the system which it is flexible and is easy to manage on the 
aspect of practical use of the public key of the transmitting-side computer 200 can be 
built. 
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[0056] (2) In the partner authentication between the 2 persons who used the digital 
signature in an agent coordination system, the receiving-side computer (agent) 
needed to receive the public key of a transmitting-side computer to every 
transmitting-side computer (agent) conventionally. By the example 3, since the 
authentication processing computer 100 between the transmitting-side computer 200 
equipped with the agent A260 who communicates mutually, and the agent B370. and 
the receiving-side computer 300 manages a user s (transmitting-side computer 200) 
public key collectively, the complicatedness to which the receiving-side computer 300 
receives the public key of the transmitting-side computer 200 separately can be 
excluded, and network traffic, especially the network traffic covering between the 
transmission-and-reception side computers 200,300 can be decreased. 
[0057] (3) In an agent coordination system, when performing the communication link 
between migration mold agents, a transmitting-side agent pools data to the 
coordination space of an agent coordination device, and another side and a 
receiving-side agent have the method which asks periodically an agent coordination 
device, publishes a message, and realizes a communication link. If the conventional 
authentication processing is applied to such a communication mode, processing will 
become remarkably complicated and will become cost quantity, but since the 
authentication processing computer 100 between the transmitting-side computer 200 
equipped with the agent A260 of a transmitting side and the agent 8370 of a receiving 
side and the receiving-side computer 300 manages a user s (transmitting-side 
computer 200) public key when this example 3 is applied, compared with the case 
where authentication processing of the above-mentioned former is applied, 
processing becomes easy, and cost decreases. 

[0058] In the above-mentioned examples 1-3, although the receiving-side computer 
was single, the effectiveness which can apply this invention approach also when a 
receiving-side computer is plurality, and becomes size more can also be 
demonstrated. The case where this invention approach is hereafter applied to the 
multicast communication link whose receiving-side computer is plurality as an 
example 4 is explained. 

[0059] <Configuration of an example 4> Drawing 14 is the block diagram showing the 
communication system with which the example 4 of the authentication art by this 
invention was applied. Here, in the transmitting-side computer 200, a network 400 
connects and the server computer (henceforth an authentication processing 
computer) 100 which functions as an authentication processing computer shows 
[ computers / 300 (300a, 300b. 300c) / three / receiving-side ] the whole system 
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configuration with the multicast communication facility connected by the network 401 
here [ two or more ]. 

[0060] Since this system is approximated with the example 1 shown in drawing 1 » only 
difference with the system of drawing 1 is described about each part. As mentioned 
above, three receiving-side computers 300a, 300b. and 300c exist here, and the 
network 401 connects with the authentication processing computer 100 respectively. 
Each receiving-side computers 300a, 300b, and 300c are the same configurations. It 
replaces with the authentication communication service processing section 1 1 1 of 
drawing 1 . and the application server program 110 of the authentication processing 
computer 100 is equipped with multicast authentication communication service 
processing section 111a with multicast communication facility. Here, multicast 
communication facility means the function to transmit the commo data which the 
application program 210 on the transmitting^side computer 200 transmitted to the 
authentication processing computer 100 by three receiving-side computers 300a and 
300b and addressing to 300c to these three receiving^side computers 300a, 300b, and 
300c. In addition, in drawing 1 4 , the same sign as drawing 1 shows the same or a 
considerable part. 

[0061] <Actuation of an example 4> Next, actuation of the above-mentioned example 
4 is explained. Processing of the application program 210 concerned at the time of an 
application program 210 transmitting correspondence to the authentication 
processing computer 100 (application server program 110) in the transmitting-side 
computer 200 is the same as that of the case ( drawing 2 ) of an example 1. 
[0062] In the correspondence which an application program 210 transmits, three 
addressees are described as recipient information. That is, a format of commo data 
here comes to be shown in drawing 1 5 . A transmitting person is expressed by A, the 
addressee is expressed by B, C, and D. and A-D contains each address information. 
Correspondence consists of the transmitting person information A and recipient 
information B. C, and D, and a correspondence body, and commo data consists of this 
correspondence and a digital signature of the message digest of correspondence so 
that it may illustrate. By the example 4, receiving-side computer 300b and recipient 
information D are set [ the transmitting person information A / the transmitting-side 
computer 200 and recipient information B ] to receiving-side computer 300c by 
receiving-side computer 300a and recipient information C. 

[0063] Actuation of the authentication processing computer 100 (application server 
program 110) which received the commo data from the transmitting-side computer 
200 is as being shown in drawing 1 6 . That is. the application server program 110 
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receives the commo data with which it comes to double the correspondence and the 
digital signature from the transmitting-side computer 200 first (step S161). 
[0064] Next the application server program 110 verifies the digital signature of the 
transmitting-side computer 200 by the digital signature verification processing 
section 113 (step SI 62). The following procedures perform verification of this digital 
signature. Introduction and the application server program 1 1 0 use the public key of 
the transmitting-side computer 200 registered into the user public key database 120. 
and take out a message digest from the digital signature of the transmitting-side 
computer 200. Next, the message digest processing section 1 12 newly generates the 
message digest of the above-mentioned correspondence. And the message digest 
taken out from the above-mentioned digital signature is compared with the newly 
generated message digest, and if those coincidence is checked, verification of a digital 
signature will terminate normally. If inharmonious, an error will be notified to the 
transmitting-side computer 200. 

[0065] After verification of a digital signature, the application server program 1 10 
starts the digital signature generation processing section 114. uses the private key of 
the self-program managed at the private key Management Department 130, and newly 
generates the digital signature of the message digest of the above-mentioned 
correspondence (step SI 63). Then, the application server program 110 transmits the 
commo data with which it comes to double the above-mentioned correspondence and 
the newly generated digital signature to the receiving-side computer 300 (step SI 64). 
[0066] As for transmission (step SI 64) to the receiving-side computer 300 of commo 
data, the receiving-side computers 300a, 300b, and 300c are repeatedly performed 
only for the number of the receiving-side computers 300 here 3 times, and a multicast 
communication link is realized (step SI 65). Each recipient information can be known 
by referring to the above-mentioned correspondence. Processing of the application 
program 310 concerned at the time of an application program 310 receiving 
correspondence in each receiving-side computer 300 is the same as that of the case 
( drawing 5 ) of an example 1. 

[0067] <Effectiveness of an example 4> Also in (1) multicast communication link, since 
the authentication processing computer 100 by which it operates independently by 
not a public key certificate authority but the single layered structure of a large 
number systematized by the layered structure as for which each operates in 
cooperation manages the public key of the transmitting-side computer 200 like the 
conventional technique, the system which it is flexible and is easy to manage on the 
aspect of practical use of the public key of the transmitting-side computer 200 can be 



20 



JP 2000-138670 



built 

[0068] (2) When partner authentication was conventionally performed among two or 
more addressees using a digital signature, each receiving-side computer needed to 
receive the public key of a transmitting-side computer for every transmitting-side 
computer. By the example 4, since the above-mentioned authentication processing 
computer 100 manages a user's (transmitting-side computer 200) public key 
collectively, the complicatedness to which each receiving-side computer 300 (300a, 
300b, 300c) receives the public key of the transmitting-side computer 200 separately 
can be excluded, and network traffic, especially the network traffic covering between 
the transmission-and-reception side computers 200,300 can be decreased. Such 
effectiveness in an example 4 becomes the part whose number of receiving-side 
computers increases, and a more remarkable thing as compared with the 
effectiveness in the authentication communication link between the 2 persons in an 
example 1. 

[0069] The authentication processing computer 100 is equipped with the user public 
key database 120 in the above-mentioned examples 1 and 4. Moreover, the computer 
100 is equipped with the object public key database 160 in the example 2. Furthermore, 
the agent coordination device 1 70 is equipped with the agent public key database 1 74 
in the example 3. It is also possible to make this the configuration in which a public key 
certificate authority manages each above-mentioned public key database as the 
specification of ITU-X.509 grade. The case where except the user public key database 
120 from the authentication processing computer 100, replace with it. and the public 
key certificate authority of the exterior by the specification of ITU-X.509 grade is 
hereafter used in an example 1 ( drawing 1 ) as an example 5 is explained. 
[0070] <Configuration of an example 5> Drawing 1 7 is the block diagram showing the 
communication system with which the example 5 of the authentication art by this 
invention was applied. Here, the whole system configuration to which the server 
computer (henceforth an authentication processing computer) 100 which functions as 
an authentication processing computer was connected to by the network 400 in the 
transmitting-side computer 200, and was respectively connected by the network 401 
in the receiving-side computer 300 is shown. By this example 5, the authentication 
processing computer 100 is connected with the external public key certificate 
authority 700 by the network 404 so that it may illustrate. And with reference to the 
time of verifying a user s (transmitting-side computer 200) digital signature, as a user 
public key database used, it has in the above-mentioned public key certificate 
authority 700, and is made as [ use / as the specification of ITU-X.509 grade / the 
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user public key database 710 managed by the public key certificate authority 700 ]. A 
user's public key is registered into the above-mentioned user public key database 710. 
The above-mentioned user public key database 710 is under management of the 
application server program 1 10 at the time of verification of a digital signature. Since 
others are the same as that of an example 1 ( drawing 1 ). in drawing 14 , they give the 
same sign to the same part as drawing 1 , and omit the explanation. 
[0071] <Actuation of an example 5> Next, actuation of the above-mentioned example 
5 is explained. Processing of the application program 210 concerned at the time of an 
application program 210 transmitting correspondence to the authentication 
processing computer 100 (application server program 1 10) in the transmitting-side 
computer 200 is the same as that of the case ( drawing 2 ) of an example 1. A format 
of the commo data which an application program 210 transmits is the same as that of 
the case ( drawing 3 ) of an example 1. 

[0072] Actuation of the authentication processing computer 100 (application server 
program 1 10) which received the commo data from the transmitting-side computer 
200 is as being shown in drawing 18 . That is. the application server program 110 
receives the commo data with which it comes to double the correspondence and the 
digital signature from the transmitting-side computer 200 first (step SI 81). 
[0073] Next the application server program 110 verifies the digital signature of the 
transmitting-side computer 200 by the digital signature verification processing 
section 1 1 3, after acquiring a user s (transmitting-side computer 200) public key from 
the user public key database 710 of the public key certificate authority 700 (step 
SI 82) (step S183). The following procedures perform verification of this digital 
signature. Introduction and the application server program 1 1 0 use the public key of 
the transmitting-side computer 200 acquired at step 182, and take out a message 
digest from the digital signature of the transmitting-side computer 200. Next, the 
message digest processing section 112 newly generates the message digest of the 
above-mentioned correspondence. And the message digest taken out from the 
above-mentioned digital signature is compared with the newly generated message 
digest, and if those coincidence is checked, verification of a digital signature will 
terminate normally. If inharmonious, an error will be notified to the transmitting-side 
computer 200. 

[0074] After verification of a digital signature, the application server program 110 
starts the digital signature generation processing section 114, uses the private key of 
the self^program managed at the private key Management Department 130. and newly 
generates the digital signature of the message digest of the above-mentioned 
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correspondence (step S184). Then, the application server program 1 10 transmits the 
commo data with which it comes to double the above-mentioned correspondence and 
the newly generated digital signature to the receiving-side computer 300 (step S185). 
Recipient information can be known by referring to the above-mentioned 
correspondence. Processing of the application program 310 concerned at the time of 
an application program 310 receiving correspondence in the receiving^side computer 
300 is the same as that of the case ( drawing 5 ) of an example 1. 
[0075] <Effectiveness of an example 5> Since each manages the public key of the 
transmitting-side computer 200 like (1) conventional technique under management of 
the authentication processing computer 100 which operates independently by not a 
public key certificate authority but the single layered structure of a large number 
systematized by the layered structure which operates in cooperation, the system 
which it is flexible and is easy to manage on the aspect of practical use of the public 
key of the transmitting-side computer 200 can be built. 

[0076] (2) In the partner authentication between the 2 persons who used the digital 
signature, the receiving-side computer needed to receive the public key of a 
transmitting--side computer for every transmitting-side computer conventionally. By 
the example 5, since the above-mentioned authentication processing computer 100 
manages a user's (transmitting-side computer 200) public key collectively under the 
management, the complicatedness to which the receiving-side computer 300 receives 
the public key of the transmitting-side computer 200 separately can be excluded, and 
network traffic, especially the network traffic covering between the 
transmission-and-reception side computers 200.300 can be decreased. 
[0077] In addition, by examples 1-5 ( drawing 1 , 6. 10. 14, 17). although the 
transmitting-side computer 200 and the receiving-side computer 300 all show the 
case of 1 to 1 (it is 1 to 1 set when it is the multicast communication link of an 
example 4), two or more sets of combination of the transmitting-side computer 200 
and the receiving-side computer 300 exists on both sides of the authentication 
processing computer 100 in fact. Each of each examples [ two or more sets of] 
operates similarly in each class, when it exists such, and the same effectiveness is 
acquired. Moreover, in examples 1-5, "management" means registration of the public 
key concerned, deletion, updating, retrieval, reference, etc. about the public key in 
each public key database. 
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